European Banking Authority (EBA) Board of Supervisors minutes from December 2025 detailing the ad hoc meeting to interview and shortlist candidates for the EBA Chairperson role, culminating in a two-candidate shortlist for the European Parliament and Council.
The European Banking Authority (EBA) today published its final Guidelines on proportionate retail diversification methods under the Capital Requirements Regulation (CRR). The Guidelines provide a harmonised framework to assess whether their retail portfolios are sufficiently diversified, while ensuring a proportionate application for smaller institutions.
The European Banking Authority (EBA) published today an Opinion advising national competent authorities (NCAs) under the Revised Payment Services Directive (PSD2) on how to proceed once the transition period that is set in the EBA’s No-Action Letter of 2 June 2025 (EBA/Op/2025/08) comes to an end on 2 March 2026. The transition period allows crypto asset service providers (CASPs) nine months to continue transacting electronic money tokens that qualify as payment services while submitting, and awaiting the response to, their application for authorisation under PSD2.
EBA opinion outlining supervisory priorities for national authorities as the transition period under its No-Action Letter on PSD2 and MiCA interplay ends on 2 March 2026, addressing authorisation processes, conditions for continued EMT transactions, and coordination between PSD2 and MiCA frameworks.
European Banking Authority (EBA) data protection notice outlining how personal data of students in the Young Talents Policy – Students Programme is processed under EU Regulation 2018/1725, covering selection, onboarding, evaluation, and exit procedures, including data access, retention periods, and legal basis.
European Banking Authority (EBA) data protection notice outlining personal data processing for its Young Talents Policy and Job Shadowing Programme under EUDPR, covering selection, onboarding, evaluation, and data retention for students aged 14–19.
European Banking Authority (EBA) data protection notice outlining personal data processing for its Young Talents Policy Traineeship Programme under EUDPR, covering selection, onboarding, and exit procedures, including data access, retention periods, and legal basis.
European Banking Authority (EBA) policy outlining guidelines for its young talents programmes, including the Students Programme, Job Shadowing Internship, and Traineeship Policy, effective October 2025, consolidating and updating previous internship frameworks.
EBA 2025 list of EU/EEA financial conglomerates under Directive 2002/87/EC (FICOD), including group names, coordinators, and competent authorities responsible for supplementary supervision as of October 2025.
The European Banking Authority (EBA) launched today a public consultation on its Discussion Paper on the simplification and assessment of the credit risk framework. The Paper sets out preliminary ideas to enhance the usability, efficiency and simplicity of the credit risk framework, aiming to stimulate a broader discussion on how to better structure the EBA’s future work in this area. Based on the comments received, the EBA will assess potential simplifications as part of its future policy work. The consultation runs until 10 May 2026.
EBA public hearing on 4 February 2026 discussing regulatory (RTS) and implementing technical standards (ITS) for prudentially material operations under the Capital Requirements Directive (CRD), focusing on cooperation and consultation processes.
European Banking Authority (EBA) record of processing activity for financial transactions under EUDPR Article 31 – details data handling for payments, budget execution, and personal data categories of staff, contractors, and beneficiaries, including retention periods and security measures.
EBA discussion paper seeking stakeholder feedback on simplifying the credit risk framework under CRR, including proposals for the Standardised and IRB approaches, harmonisation of rules, and real estate exposure adjustments.
As DORA requires financial entities to pre-determine the frequency of audits and inspections on the basis of a risk-based approach, are financial entities not permitted to agree on a maximum audit frequency (e.g. once per year) with their ICT third-party service providers?